1. Introduction

Finsdale Construction is committed to protecting the privacy and security of your personal data. This policy outlines how we collect, use, and protect personal information in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Scope

This policy applies to all personal data processed by Finsdale Construction, including that of employees, clients, suppliers, and other third parties.

3. Data Collection

We may collect and process the following types of personal data:

• • Employees: Contact details, employment records, payroll information, etc.

• • Clients: Contact details, project information, financial details, etc.

• • Suppliers: Contact details, contract details, payment information, etc.

4. Data Usage

Personal data will be used for the following purposes:

• • Managing employment relationships

• • Providing and managing client projects

• • Managing supplier relationships

• • Ensuring compliance with legal and regulatory obligations

5. Legal Basis for Processing

We process personal data based on the following legal grounds:

• • Consent: When you have given clear consent for us to process your personal data for a specific purpose.

• • Contract: When the processing is necessary for a contract we have with you.

• • Legal Obligation: When the processing is necessary to comply with the law.

• • Legitimate Interests: When the processing is necessary for our legitimate interests, and those interests are not overridden by your rights.

6. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or damage. This includes secure storage systems, access controls, and regular security assessments.

7. Data Retention

Personal data will be retained only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Once no longer needed, personal data will be securely deleted or anonymized.

8. Your Rights

You have the following rights regarding your personal data:

• • Access: To request a copy of the personal data we hold about you.

• • Rectification: To request correction of inaccurate or incomplete data.

• • Erasure: To request deletion of your personal data, under certain conditions.

• • Restriction: To request restriction of processing of your personal data, under certain conditions.

• • Objection: To object to the processing of your personal data, under certain conditions.

• • Portability: To request the transfer of your personal data to another organization, or to you, under certain conditions.

9. Data Sharing

We may share personal data with:

• • Service providers who assist us in operating our business

• • Legal and regulatory authorities, when required by law

• • Other third parties, with your consent or as necessary for the performance of a contract

10. Contact Information

For questions, concerns, or to exercise your rights regarding your personal data, please contact our Data Protection Officer at:

Email: [email protected]

11. Policy Updates

This policy will be reviewed regularly and updated as necessary to reflect changes in our practices or legal requirements.